Static task
static1
Behavioral task
behavioral1
Sample
0d2da86095571387ea24c6928ef630a9_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0d2da86095571387ea24c6928ef630a9_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0d2da86095571387ea24c6928ef630a9_JaffaCakes118
-
Size
141KB
-
MD5
0d2da86095571387ea24c6928ef630a9
-
SHA1
cd2f8ac3a835e456c0dcb6ae3f58a4b03f10878e
-
SHA256
22dca5bdfe66e4674c646387128974139176895d19ba70d43f28e1b180d82bbd
-
SHA512
f964de360146a127e3170604a22403db5778511905943eb5ec27ae83acecb6042ec3557bb9f025e48384a0449c50a658a92c30ae9518a36f208377190c6d5f78
-
SSDEEP
3072:+kNUhKOo5kEAmGfKPHvDRIgqEECHMxr8vEADgLxuMRyqNUb:D+kb2Ixag3E9xqMxbRBg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d2da86095571387ea24c6928ef630a9_JaffaCakes118
Files
-
0d2da86095571387ea24c6928ef630a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE